I wonder if it would be sensible for spamassassin to have a configuration option for all default-on dnsrbls (one option, applying to all):
disabled auto enabled where the default is auto, and auto means "enabled if resolver is 127.0.0.1, ::1 or localhost, else disabled".
signature.asc
Description: PGP signature
